Medical Therapy Systems with Closed-Loop Controls and Methods of Making and Using the Same

2. The method of claim 1, wherein configuring each of the plurality of controllers comprises causing, by the computer system, the controller to operate in an enumerable number of operational states, such that the enumerable number of operational states correspond to known safe values of the measurable parameter or an unmeasured parameter based on the measurable parameter.

5. The method of claim 1, further comprising theorem-proving, by the computer system, a path for communicating information from each of the plurality of controllers to the respective one of a plurality of medical therapeutic systems, wherein the computer system comprises an untrusted user-interface system.

6. The method of claim 1, further comprising causing, by the computer system, each of the plurality of controllers to filter recommendations from the computer system relating to the operating instructions, such that each of the plurality of controllers provides the recommendations to the respective one of the plurality of medical therapeutic systems only when the operating instructions produce results within the respective one of the plurality of safety envelopes.

7. The method of claim 1, further comprising causing, by the computer system, the particular one of the plurality of controllers to generate an alarm signal responsive to determining that the measurable parameter exceeds the maximum or minimum limits.

9. The computer system of claim 8, wherein the executable code to configure the controller causes the controller to operate in an enumerable number of operational states, such that the enumerable number of operational states correspond to known safe values of the measurable parameter or an unmeasured parameter based on the measurable parameter.

12. The computer system of claim 8, wherein the executable code further causes the computer system to theorem-prove a path for communicating information from the controller to the medical therapeutic system, wherein the computer system comprises an untrusted user-interface system.

13. The computer system of claim 8, wherein the executable code further causes the controller to filter recommendations from the computer system relating to the operating instructions, such that the controller provides the recommendations to the medical therapeutic system only when the operating instructions produce results within the safety envelope.

14. The computer system of claim 8, wherein the executable code further causes the controller to generate an alarm signal responsive to determining that the measurable parameter exceeds the maximum or minimum limits.

16. The physical memory of claim 15, wherein the executable code to configure the controller causes the controller to operate in an enumerable number of operational states, such that the enumerable number of operational states correspond to known safe values of the measurable parameter or an unmeasured parameter based on the measurable parameter.

19. The physical memory of claim 15, wherein the executable code further causes the one or more computer processors to theorem-prove a path for communicating information from the controller to the medical therapeutic system, wherein the one or more computer processors is associated with an untrusted user-interface system.

20. The physical memory of claim 15, wherein the executable code further causes the controller to filter recommendations from the one or more computer processors to relating to the operating instructions, such that the controller provides the recommendations to the medical therapeutic system only when the operating instructions produce results within the respective one of the plurality of safety envelopes.